Issue with missing item in all programs menu after virus

[Xtreme]

I am having issues with links in the start menus/all programs missing in the sub menus.

When I go to all programs and the I hover over Mozilla for example, it says its empty. There are several others that say this as well.

This computer had a virus and I was able to remove everything and now Im dealing with the after effects of it. This is a XP machine BTW. I have followed the advice at this site with no luck because I am missing the 'explorer' folder when I look in the registry : HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

I have also ran windows repair and still did not correct this issue.

Anybody have any idea whats going on?

 

[Martyn]

Have you tried running unhide.exe?

 

[Xtreme]

Well thats the thing they are not hidden. If I go to 'all users' directory and look in the docs and settings/ local settings / programs everything is there but If I go to the 'user account' its not there.

 

[Azz]

Have you done a system restore to before it was infected?

 

[Kitten Kong]

I had the same issue with a laptop last week. In the end every fix and repair I attempted failed. After spending literally all day on it, I recommended to my client to nuke it.

Client agreed, 2 hours later job complete.

 

[grayfoxcomputing]

found this on malwarebytes forum:


Start Menu Program shortcuts
Current User Quick Start shortcuts
All Users Desktop folders and shortcuts

Try navigating to the following path: (make sure you have the hidden files and folders visible)

C:\Documents and Settings\your user name goes here \Local Settings\Temp\smtmp

Inside the smtmp folder you will see three folders named 1, 2, 4

1 = Start Menu Program shortcuts
2 = Current User Quick Start shortcuts
4 = All Users Desktop folders and shortcuts

Simply copy the shortcuts back to the original path.

It's worth a check to see if the shortcuts are there.

 

[Xtreme]

Yeah I tried that but unfortunately that didnt work either.

In the registry I am missing this entry at the end of this address HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Explorer

I have a feeling this is what is causing the issue. I wonder how I would go about replacing this?

 

[Xtreme]

@Cadishead - Im thinking I might have to do this but I would love to know how to fix it just to cure my own curiosity.

 

[Xtreme]

Ok, one of the tools in D7 got me half way home. I think it was 'Find missing shortcuts', 'Reset Hidden Volume' or 'Reset Permissions'. Now I have everything in Accessories and Games. The other software entries are still missing their files though.

 

[Bobbing]

Yeah I tried that but unfortunately that didnt work either.

In the registry I am missing this entry at the end of this address HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Explorer

I have a feeling this is what is causing the issue. I wonder how I would go about replacing this?

You didn't happen to run a program like Ccleaner? That would have wiped those moved menus.

 

[seedubya]

You didn't happen to run a program like Ccleaner? That would have wiped those moved menus.

I got caught by this once. Ran CCleaner BEFORE the virus scan, as I always do but of course the virus had moved the shortcuts to a temp folder and they were deleted. Luckily copped it straight away and ran Recuva and got all the shortcuts back.

 

[Xtreme]

I got caught by this once. Ran CCleaner BEFORE the virus scan, as I always do but of course the virus had moved the shortcuts to a temp folder and they were deleted. Luckily copped it straight away and ran Recuva and got all the shortcuts back.

This sounds like what happened then. So I guess im about to run Recuva then and see if I can get them back.